Just tell your computer to ignore HTML and you will be fine. Hasn't this been around forever? Wasn't the first wave jpg files that automatically load when you read the e-mail? So now it is java scripts in HTML. BFD. Insist on ASCII.

"When my pc infected with malicious software (sent by the hacker),
and the hacker take over my pc (or my pc got hijacked by the hacker).
It is like the hacker sitting infront of my pc.
He can do what ever he like...download/upload any files/pictures he like.

But the person who face the consequences is me because it is my pc and the internet account is under my name. The hacker is totally hidden, i don't know who the hacker is, and the ISP also unable to trace who the hacker is?

"When my pc infected with malicious software (sent by the hacker),
and the hacker take over my pc (or my pc got hijacked by the hacker).
It is like the hacker sitting infront of my pc.
He can do what ever he like...download/upload any files/pictures he like.

But the person who face the consequences is me because it is my pc and the internet account is under my name. The hacker is totally hidden, i don't know who the hacker is, and the ISP also unable to trace who the hacker is?

Yes, you are right. Many times a computer can be turned into a zombie, directed to attack anything from government installations, to power companies, all without the knowledge of the computers owner. It is usually easy to determine the attack didn't come from your computer, but it requires the police, or other law enforcement organizations coming into your home and confiscating your computer to find out what's going on. Your computer will be returned to you, but not before it has been gone through thoroughly for a second time. The virus writer has most likely already gone through it once you were infected the first time, so your system and privacy can be violated two or even more times through no fault of your own.